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Verifiable Voting 

TECHNICAL FIELD 
This invention relates to voting. 

BACKGROUND 

5 Current voting techniques do not provide a voter with the abiUty to verify that their 

vote has been counted, and counted correctly. Typically, a voter enters a voting booth at a 
polUng station, makes their voting choices by ballot and then exits the voter booth. In 
general, the actual tallying of votes is made later, after polls have closed, either by hand 
counting by election officials or by a ballot-coimting machine. The tallying process does not 
1 G pro vide any means for-each voter to verify that his or her vote was comited, and counted 
correctly. 

SUMMARY 

According to an aspect of this invention a method of verifiable voting includes 
receiving election selections, producing a receipt representation of the election selections, the 

15 receipt having a unique receipt number for a voter, and publishing election results, the 
election results including the election selections and unique receipt number. 

One or more of the following features may also be included: responding to choices 
displayed by a computer to make election selections, entering a voter station where the voter 
station is a voting booth located at a polling place, entering a voter station, where the voter 

20 station is an electronic connection to the computer, and responding to choices transmitted by 
the computer to make election selections, printing a receipt at the polling place, printing a 
receipt in the voter booth, listing a receipt number and election selections on an electronic 
medium, entering a voter station where the voter station is a mail in ballot, mailing a printed 
receipt in response to the mail in ballot, entering a voting station where the voter station is a 

25 telephone connection to a polling place, and responding to election choices transmitted over 
the telephone connection to make election choices, printing election results in a printed 
media, printing election results, and posting the resuhs in a public place, posting election 
results to an electronic bulletin board, calling a telephone access system having a means of 
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entering the receipt number, the system also having a means of responding to an entered 
receipt number, entering the receipt number, and receiving a response for the election 
selections v^hich correspond to the receipt number. 

According to a further aspect of this invention, a computer program stored on a 
5 computer-readable medium, the computer program including instructions that cause a 
computer to output election choices, receive election selections, and produce a receipt 
representation of the election selections, the receipt having a unique receipt number for a 
voter. 

One or more of the following features may also be included: instructions to cause the 
10 computer to: output election results to an electronic media, the election results including the 
election selections and unique receipt number where the electronic media includes an 
electronic bulletin board, determine whether all election selections are completed, and if the 
erection selections are^ompleted then produce the receipt, and determine whether a voter has 
indicated completion of the selection process, and if the voter indicates completion produce 
15 the receipt 

Embodiments of the invention may have one more of the following advantages. 
Verifiable voting provides a receipt with a unique identifying number to each voter after 
making election choices at a voting station. The method includes a publishing process so that 
each voter can verify that their votes were counted and counted correctly. 
20 The details of one or more embodiments of the invention are set forth in the accompa- 

nying drawings and the description below. Other features, objects, and advantages of the 
invention will be apparent from the description and drawings, and from the claims. 

DESCMPTION OF DRAWINGS 

FIGURE 1 is a flow diagram of a voting process. 
25 FIGURE 2 is flow diagram of a selection sub-process. 

FIGURE 3 is a depiction of an exemplary voting receipt. 

FIGURE 4 is a depiction of an exemplary publication of voting results. 

Like reference symbols in the various drawings indicate like elements. 
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DETAILED DESCRIPTION 

As used herein, 'receipt number' refers to a unique identifying number assigned to 
each voter in an election. 

As used herein, 'election results' refers to the election selections made by one or 
5 more voters participating in a specific election. 'Election results' may also include receipt 
numbers which correspond to election selections made by each voter in a specific election. 

Referring to FIGURE 1, a verifiable voting process 100 executing in a computer 
system 10, includes a voter entering a voting station 1 10. The computer 10 includes a 
processor 12 and a memory 14. Memory 14 stores machine-executable instructions and an 
10 operating system. Instructions are executed by the processor to perform the verifiable voting 
process 100. Memory 14 also contains a Hst of election choices v^hich are available for an 
election. Voting process 100 executes selection sub-process 130 that outputs the list of voter 
— choices and receives voter selectionsrUpoh compre^^^ of selection sub-pScess 130, process 

100 generates 140 a voter receipt 144 for the voter. The generation 140 of voter receipt 144 
15 includes a number generator process 142 to produce a unique voter identification number. 

The voter exits the voting station with their voter receipt 144. Upon closing 150 of the 
polls, the election results for the voting station are pubhshed 160 and the results verified 170. 
Verification 170 allows the voter to determine that their list of voter selections was received 
and counted correctly. The voter receipt is private and given only to the voter such that the 
20 voter can confidentially verify their election selections. 

Referring to FIGURE 2, an selection sub-process 130 includes outputting voter 
choices 205 and determining 210 whether all voter selections have been made. If all voting 
selections have been made, the sub-process 130 returns 230 to the receipt generator 140 and 
generates a receipt 144 for the voter. Otherwise, the sub-process 130 determines 220 whether 
25 a voter has indicated they are finished. If finished, the sub-process 130 returns 230 to the 
receipt generator 140 and generates a receipt for the voter. 

Referring to FIGURE 3, an exemplary voter receipt includes election selections 330 
and the receipt number 320A for voter 1 10. 

Referring to FIGURE 4, an exemplary publication 310 includes receipt numbers 
30 320A-320E along with the election selections 340 which correspond to each receipt number. 
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As used herein, 'polling place' may refer to an actual voting location designated by 
the local voting authorities. Alternatively, 'polling place' may refer to a phone-access system, 
or an electronic voting system (i.e. an electronic address where electronic votes may be 
entered) or the physical address where a mail-in ballot may be mailed (e.g., an absentee 
ballot). 

Entering a voter station may include entering an actual voting booth, i.e., at a polling 
place. Alternatively, entering a voter station may include entering election selections by 
phoning, e-mailing (electronically) or filling out a printed ballot and mailing it to the polling 
place. 

Receipt generator 140 may produce a printed receipt at the voting booth, or at the 
polling place. The receipt number and election selections may also be given to a voter 1 10 by 
telephone, electronically (i.e., via e-mail or an electronic file), or a printed receipt sent by 
U.Srmail.=^In particular,=a voter who ma^^ 
(whether by mail, or in person) is entitled to a voting receipt. 

The receipt number produced for each voter who takes part in process 100 is 
produced by number generator 142. The number generator uses a random number algorithm 
such as an algorithm based on prime numbers, independent sequences or secure hashing. In 
order to provide a unique receipt number for every voter in the election, the number 
generator also maintains a list of previously generated numbers for earlier voters in an 
election. As long as the total number (the universe) of possible numbers is sufficiently large 
to provide all voters a unique number, any known random number generator algorithm can be 
used to generate the receipt numbers. A smaller universe of unique numbers can be used if a 
voting station includes additional information in the receipt number such as a polling place 
identifier, a time stamp, a date stamp, a zip code of the polling place, or the voting machine 
nimiber. 

The receipt number generated for each voter may include, at least, alphanumeric 
characters and numbers. Referring again to FIGURE 3, the exemplary receipt number 320A 
may be lengthened such that a sufficient universe of unique receipt numbers can be generated 
for each voter in a particular election. 
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The definition of 'receipt' may include any definition allowed in the jurisdiction 
where the voting process 100 occurs. The voter 1 10 may also have the option of not taking a 
receipt, or not generating a receipt. 

Publishing may be accomplished by printing the election results in a printed 
5 publication, such as a newspaper, newspaper supplement or magazine. Publishing may also 
include printing the election results and posting them at a public place, or, listing the election 
results on an electronic bulletin-board (e.g., an internet web-site), or, broadcasting the 
election results on television or by radio. Publishing could also include distributing election 
results on a CD-ROM or other digital media to interested members of the public. 
10 Publishing and verifying could also be accomplished by a telephone access system 

where a voter could enter their receipt number via voice or touchpad and the election 
selections corresponding to that receipt number would be given in response over the 
telephone. ^ • "- ^ ^ ' ^ ' ' 

As shown in FIGURE 1, pubhshing 160 occurs after closing 150 the polls. This 
15 sequence of events is in keeping with current voting practices of publishing election results 
only after closing the polls, however, if election laws permitted, publishing could begin 
sooner than the closing of the polls. 

Processes 100 and 130 are not limited to use with the hardware and software 
configuration of FIGURE 1; it may find applicability in any computing or processing 
20 environment. Processes 100 and 130 may be implemented in hardware (e.g., an ASIC 
{Application-Specific Integrated Circuit}, and/or an FPGA {Field Programmable Gate 
Array}), software, or a combination of hardware and software. 

Processes 100 and 130 may be implemented using one or more computer programs 
executing on programmable computers that each includes a processor, a storage medium 
25 readable by the processor (including volatile and non- volatile memory and/or storage 
elements), at least one input device, and one or more output devices. 

Each such program may be implemented in a high level procedural or object-oriented 
programming language to communicate with a computer system. Also, programs can be 
implemented in assembly language or machine language. The language may be a compiled 
30 or an interpreted language. 



5 



12128-128001 



Each computer program may be stored on a storage medium or device (e.g., CD- 
ROM, hard disk, or magnetic diskette) that is readable by a general purpose or special 
purpose programmable computer for configuring and operating the computer where the 
storage medium or device is read by the computer to perform processes 100 and 130. 

Processes 100 and 130 may also be implemented as a computer-readable storage 
medium, configured with a computer-readable storage medium, configured with a computer 
program, where, upon execution, instructions in the computer program cause the computer to 
operate in accordance with processes 100 and 130. 

A number of embodiments of the invention have been described. Nevertheless, it will 
be understood that various modifications may be made without departing fi-om the spirit and 
scope of the invention. Accordingly, other embodiments are within the scope of the 
tbllowing claims. 



